7-Zip vulnerabilities

2 known vulnerabilities in 7-Zip from Ipavlov. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  7-Zip: NULL Pointer Dereference

  CVE-2025-53817Jul 17, 2025Ipavlov

  7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.

• 7.5 High severity

  7-Zip: Heap-based Buffer Overflow

  CVE-2025-53816Jul 17, 2025Ipavlov

  7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.